Content distribution storage system, method for obtaining content, node device, and computer readable medium

• US 8,880,878 B2
• Filed: 10/27/2009
• Issued: 11/04/2014
• Est. Priority Date: 10/27/2008
• Status: Active Grant

• Current Assignee: Brother Kogyo Kabushiki Kaisha
• Original Assignee: Brother Kogyo Kabushiki Kaisha
• Inventors: Mori, Takafumi
• Primary Examiner(s): Zele, Krista
• Assistant Examiner(s): DESAI, MARGISHI V
• Application Number:
  US12/606,511
• Publication Number:
  US 20100106968A1
• Time in Patent Office: 1,834 Days
• Field of Search: 713/10, 713/176, 713/158
• US Class Current: 713/158
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A content distribution storage system includes: a first transmission unit configured to transmit a special content including certificate revocation list information indicating a list of at least an invalid electronic certificate to a first node group; a second transmission unit configured to transmit identification information for identifying the special content to a second node group; and a first node device. The first node device includes: a certificate obtaining unit configured to obtain the electronic certificate; an identification information obtaining unit configured, based on the obtained electronic certificate, to obtain the identification information of the special content comprising the certificate revocation list information corresponding to the obtained electronic certificate obtained; and a special content obtaining unit configured to obtain the special content from at least one node device of the first node group which stores the special content associated with the obtained identification information.

Claims

1. A content distribution storage system in which a plurality of node devices are connected via a network and are capable of transmitting and receiving a content to and from one another, the system comprising:

a first transmission unit configured to transmit a special content to a first node device of the plurality of node devices, the special content comprising certificate revocation list information indicating a list of at least an invalid electronic certificate;

a second transmission unit configured to transmit identification information for identifying the special content to a second node device of the plurality of node devices; and

a third node device that is one of the plurality of node devices, the third node device comprising;

a certificate obtaining unit configured to obtain an electronic certificate from a particular node device, the particular node device being one of the plurality of node devices, the electronic certificate being used to authenticate the particular node device;

an identification information obtaining unit configured, based on the electronic certificate obtained by the certificate obtaining unit, to obtain the identification information of the special content comprising the certificate revocation list information corresponding to the electronic certificate obtained by the certificate obtaining unit, the identification information obtaining unit obtaining the identification information from one of the second node device and a node device to which the identification information is transferred from the second node device; and

a special content obtaining unit configured to obtain the special content comprising the certificate revocation list information from one of the first node device and a node device which stores the special content associated with the identification information obtained by the identification information obtaining unit.

2. The content distribution storage system according to claim 1, comprising an information processing device that comprises the first transmission unit and the second transmission unit.

3. The content distribution storage system according to claim 2,

wherein the information processing device comprises:

a determination unit configured to determine whether the special content has been stored in the first node group; and

an updating unit configured, if the determination unit determines that the special content has been stored in one of the first node device and the node device that stores the special content associated with the identification information, to update the identification information of the special content determined as having been stored with a new identification information of the special content to be transmitted;

wherein the second transmission unit transmits the new identification information updated by the updating unit.

12. The content distribution storage system according to claim 1, wherein the third node device further includes an authenticate unit configured to authenticate the particular node deice by referring to the electronic certificate of the particular node device and the certificate revocation list information included in the special content obtained by the special content obtaining unit.

16. The content distribution storage system according to claim 1, wherein

the first node device and the node device which stores the special content associated with the identification information obtained by the identification information obtaining unit belong to a first node group,

the second node device and the node device to which the identification information is transferred from the second node device belong to a second node group, and

the third node device does not belong to the first node group and the second node group.

4. A node device connected to a plurality of other node devices via a network and capable of transmitting and receiving a content to and from the plurality of other node devices in a content distribution storage system, the node device comprising:

a certificate obtaining unit configured to obtain an electronic certificate from a particular node device, the particular node device being one of the plurality of other node devices, the electronic certificate being used to authenticate the particular node device;

an identification information obtaining unit configured, based on the electronic certificate obtained by the certificate obtaining unit, to obtain identification information of a special content comprising certificate revocation list information corresponding to the electronic certificate obtained by the certificate obtaining unit, from at least one node device of a first node group, the first node group comprising one or more node devices of the plurality of other node devices which store the identification information; and

a special content obtaining unit configured to obtain the special content comprising the certificate revocation list information from at least one node device of a second node group, the second node group comprising one or more node devices of the plurality of other node devices which store the special content associated with the identification information obtained by the identification information obtaining unit.

5. The node device according to claim 4, further comprising a location information obtaining unit configured to obtain location information of at least one node device of a second node group from a management device that manages a location of the special content, the second node group comprising one or more node devices of the plurality of other node devices which store the special content, wherein the special content obtaining unit accesses at least one node device of the second node group based on the location information obtained by the location information obtaining unit, and obtains the special content from the accessed node device of the second node group.

6. The node device according to claim 5, further comprising a transmission unit configured to transmit information for inquiring the location of the special content to the management device related to the identification information obtained by the identification information obtaining unit.

7. The node device according to claim 4, wherein the second node group comprises a first node device related to the identification information associated with the special content, and wherein the special content obtaining unit obtains the special content associated with the identification information obtained by the identification information obtaining unit from the first node device related to the identification information obtained by the identification information obtaining unit.

8. The node device according to claim 7, wherein the second node group comprises one or more second node devices other than the first node device, wherein said node device further comprises a request transmitting unit configured to transmit a specia content requesting information indicating a request for the special content toward the first node device, and wherein the special content obtaining unit obtains the special content from at least one of the second node devices which has received the special content requesting information.

9. The node device according to claim 4, wherein the certificate obtaining unit obtains the electronic certificate that comprises setting information in which at least one of the identification information and associated information associated with the identification information is set as a delivery point of the certificate revocation list, wherein the identification information obtaining unit obtains the identification information based on the delivery point set in the electronic certificate.

13. The node device according to claim 4, further comprising an authenticate unit configured to authenticate the particular node device by referring to the electronic certificate of the particular node device and the certificate revocation list information included in the special content obtained by the special content obtaining unit.

10. A non-transitory computer-readable storage medium that stores a computer-executable program, the program being installed in the computer contained in a node device, the node device being connected to a plurality of other node devices via a network and capable of transmitting and receiving a content to and from the plurality of other node devices in a content distribution storage system, the program comprising instructions for:

obtaining an electronic certificate from a particular node device, the particular node device being one of the plurality of other node devices, the electronic certificate being used to authenticate the particular node device;

obtaining, based on the obtained electronic certificate, identification information of a special content comprising certificate revocation list information corresponding to the obtained electronic certificate, from a node device of the plurality of other node devices which store the identification information; and

obtaining the special content comprising the certificate revocation list information from a node device of the plurality of other node devices which store the special content associated with the obtained identification information obtained.

14. The non-transitory computer-readable storage medium according to claim 10, the program further comprising instructions for authenticating the particular node device by referring to the electronic certificate of the particular node device and the certificate revocation list information included in the special content obtained by the special content obtaining unit.

11. A method for obtaining a content in a content distribution storage system in which a plurality of node devices are connected via a network and are capable of transmitting and receiving a content to and from one another, the method comprising:

transmitting a special content from a first transmission unit to a first node device of the plurality of node devices, the special content comprising certificate revocation list information indicating a list of at least an invalid electronic certificate; and

transmitting identification information for identifying the special content from a second transmission unit to a second node device of the plurality of node devices;

wherein the plurality of node devices comprises a third node device, the third node device performing the steps of;

obtaining an electronic certificate of a particular node device, the particular node device being one of the plurality of node devices, the electronic certificate being used to authenticate the particular node device;

obtaining, based on the obtained electronic certificate, the identification information of the special content comprising the certificate revocation list information corresponding to the obtained electronic certificate, the identification information being obtained from the one of the second node device and a node device to which the identification information is transferred from the second node device; and

obtaining the special content comprising the certificate revocation list information from one of the first node device and a node device which stores the special content associated with the obtained identification information.

15. The method according to claim 11, further comprising authenticating the particular node device by referring to the electronic certificate of the particular node device and the certificate revocation list information included in the special content obtained by the special content obtaining unit.